Uncontrolled Resource Consumption in Apache Thrift

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service...

EulerOS Virtualization 2.9.0 : edk2 (EulerOS-SA-2021-1668)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - EFI Development Kit II AARCH64 UEFI FirmwareSecurity Fixes:AuthenticodeVerify calls OpenSSLs d2iPKCS7 API to parse asn encoded signe...

Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17

Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 Vaadin 14.0.6 through 14.4.3, and 3.0.0 through 4.0.2 Vaadin 15.0.0 through 17.0.10 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

NewStart CGSL CORE 5.04 / MAIN 5.04 : spamassassin Vulnerability (NS-SA-2021-0037)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has spamassassin packages installed that are affected by a vulnerability: - In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the...

The vulnerability of the programmable logic controller MELSEC iQ-R, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the programmable logic controller MELSEC iQ-R is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause malfunctions in the service process using a specially crafted package...

Regular Expression Denial Of Service (ReDoS)

markdown2 is vulnerable to regular expression denial of service ReDoS. The vulnerability exists as the regular expressions found in self.regexdefns, fencedcodeblockre, and emacsonelinervarspat causes a huge consumption of resources when parsing strings with many whitespace or newline characters...

The vulnerability in the function of the file srs2.c in the PostSRSd package allows a hacker to cause a service failure.

The vulnerability in the srs2.c file of the PostSRSd package involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause a service failure consumption of computing resources by using a tag with a time stamp in the SRS address...

The vulnerability of NVIDIA Virtual GPU driver, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of NVIDIA Virtual GPU driver is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Node.js software platform, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Node.js software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

PT-2021-14381 · Synapse +1 · Synapse +1

Name of the Vulnerable Software and Affected Versions: Synapse versions prior to 1.25.0 Description: A malicious homeserver could redirect requests to their .well-known file to a large file, leading to a denial of service attack where homeservers consume significantly more resources when requesti...

Ovarro TBox (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Ovarro Equipment: TBoxLT2 All models, TBox MS-CPU32, TBox MS-CPU32-S2, TBox RM2 All models, TBox TG2 All models --------- Begin Update A Part 1 of 3 --------- Vulnerabilities: Code Injection,...

The vulnerability of Intel Ethernet E810 series network adapter drivers allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet E810 series network adapter drivers is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service interruptions...

CVE-2020-24504

An uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux may allow an authenticated user to potentially cause a denial of service via local access...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

Design/Logic Flaw

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-24504

CVE-2020-24504: Affects Intel Ethernet E810 Adapter drivers for Linux. Uncontrolled resource consumption could allow a locally-authenticated user to cause denial of service. Expected fix is upgrade to Linux driver version 1.0.4 or later (per initial description). MiracleLinux AXSA advisory corrob...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

The vulnerability in the implementations of the IPv4Interface and IPv6Interface classes in the Lib/ipaddress.py module of the Python programming language allows a attacker to cause a service failure.

The vulnerability of the IPv4Interface and IPv6Interface classes in the Lib/ipaddress.py module of the Python programming language involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...